Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          0ELYuc4mxAMAUbwRlM6eH413VLGjGQZQh1i30fRzG7g=
Subject key identifier:   8A:49:9D:8C:25:4E:B1:0E:63:1C:BA:22:7E:13:B3:DA:07:FD:02:07
Certificate issuer:       /CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
Certificate serial:       546F345541323BDB3993E6EB9F4068F0CB89E7AD
Authority key identifier: 78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 16 May 2025 13:05:03 +0000
ROA not before:           Fri 16 May 2025 13:00:03 +0000
ROA not after:            Fri 15 May 2026 13:05:03 +0000
asID:                     268296
IP address blocks:        2804:4efc:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 12:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6f:34:55:41:32:3b:db:39:93:e6:eb:9f:40:68:f0:cb:89:e7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
        Validity
            Not Before: May 16 13:00:03 2025 GMT
            Not After : May 15 13:05:03 2026 GMT
        Subject: CN=8A499D8C254EB10E631CBA227E13B3DA07FD0207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4b:d9:b1:a8:ff:bc:83:04:be:36:06:1d:54:
                    d1:94:b9:bd:49:74:51:a4:27:0c:50:42:be:b2:d0:
                    62:19:8a:19:7a:7c:3f:62:1d:bc:d3:2b:2c:93:b8:
                    71:2e:7e:2f:a2:6f:d2:03:c8:c4:8b:87:97:44:79:
                    70:d2:08:0e:12:35:72:8a:3d:3a:b3:60:32:48:4f:
                    0c:27:16:04:08:92:c9:11:8b:10:1a:0f:87:63:67:
                    4c:e3:66:db:e8:f9:09:70:cc:f8:7d:57:c3:db:2e:
                    2f:2a:22:33:eb:21:94:e1:f7:21:4e:fc:f5:74:5b:
                    05:d9:d6:c4:2c:67:f3:7d:66:c8:e2:60:3a:46:ee:
                    fb:58:e0:30:7c:9c:18:f3:7c:13:38:4b:5a:8e:26:
                    f0:e5:b7:86:ca:e2:ab:2c:33:37:07:13:69:7d:a7:
                    5e:b2:9c:1c:26:da:e6:e2:a3:de:ee:7b:3c:ab:c2:
                    95:de:2b:04:c3:bd:26:bb:fd:4f:67:1f:03:59:8e:
                    2d:43:aa:f2:0e:df:73:66:19:08:10:e5:9c:1f:df:
                    ad:57:8b:89:36:f9:60:ff:bf:1b:9c:6d:a1:4d:17:
                    c2:a7:73:f4:a8:36:2f:f8:c8:bf:b8:e4:aa:91:d8:
                    52:7b:35:4d:a5:c7:93:0f:fb:c4:0a:2f:12:0d:ef:
                    5d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:49:9D:8C:25:4E:B1:0E:63:1C:BA:22:7E:13:B3:DA:07:FD:02:07
            X509v3 Authority Key Identifier:
                keyid:78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a613030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         68:5e:5c:86:62:75:63:0e:f7:6e:b7:43:bd:9f:a8:e3:6e:ee:
         f2:08:12:d0:84:34:49:23:f2:a7:c9:32:8b:4e:41:08:84:da:
         98:c3:45:17:8b:94:5f:4f:04:52:da:77:bd:a8:b0:f7:26:af:
         0a:f1:7e:b7:30:68:e4:77:a2:b5:46:d2:3f:0b:28:a2:c7:91:
         83:64:09:1e:8b:97:50:f3:09:de:2e:e1:21:4e:c2:48:78:ec:
         12:60:35:7d:8d:a9:85:43:8c:5b:3f:62:d8:65:4b:92:8d:f7:
         b5:da:6e:25:ad:4f:c3:6a:a7:d5:9c:b9:5a:1a:b9:97:ed:12:
         a7:7b:73:ed:15:f6:2a:ea:0b:80:6f:95:50:3e:3d:a0:7e:9c:
         31:46:30:a5:f1:57:82:d6:36:3d:64:7b:e9:6d:1c:fe:c9:3c:
         b3:6c:5c:73:1b:f6:c0:02:33:2d:0b:8c:44:57:0e:b2:d1:d1:
         99:c6:8c:43:9b:a4:57:4a:91:b9:4c:d0:20:02:b7:3e:6d:47:
         80:64:24:70:2c:a2:11:38:ba:d1:7b:ba:61:0f:1b:f6:55:40:
         0d:11:b5:d4:7b:bd:16:04:da:6b:6c:f9:be:5d:3d:e0:6c:11:
         44:e5:6f:fb:32:34:31:11:f4:19:80:0b:08:bf:ba:27:9f:01:
         45:9e:63:d8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUVG80VUEyO9s5k+brn0Bo8MuJ560wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhERUM4QzA0MjQ4OUYxQUU2OEY5QzhBMUQ4QzBEMjlE
Q0NCNDM3QzAeFw0yNTA1MTYxMzAwMDNaFw0yNjA1MTUxMzA1MDNaMDMxMTAvBgNV
BAMTKDhBNDk5RDhDMjU0RUIxMEU2MzFDQkEyMjdFMTNCM0RBMDdGRDAyMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYS9mxqP+8gwS+NgYdVNGUub1J
dFGkJwxQQr6y0GIZihl6fD9iHbzTKyyTuHEufi+ib9IDyMSLh5dEeXDSCA4SNXKK
PTqzYDJITwwnFgQIkskRixAaD4djZ0zjZtvo+QlwzPh9V8PbLi8qIjPrIZTh9yFO
/PV0WwXZ1sQsZ/N9ZsjiYDpG7vtY4DB8nBjzfBM4S1qOJvDlt4bK4qssMzcHE2l9
p16ynBwm2ubio97uezyrwpXeKwTDvSa7/U9nHwNZji1DqvIO33NmGQgQ5Zwf361X
i4k2+WD/vxucbaFNF8Knc/SoNi/4yL+45KqR2FJ7NU2lx5MP+8QKLxIN710lAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUikmdjCVOsQ5jHLoifhOz2gf9AgcwHwYDVR0j
BBgwFoAUeN7IwEJInxrmj5yKHYwNKdzLQ3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMC83OERFQzhDMDQyNDg5RjFBRTY4RjlDOEExRDhDMEQyOURDQ0I0MzdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4REVDOEMwNDI0ODlGMUFF
NjhGOUM4QTFEOEMwRDI5RENDQjQzN0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv
MzIzODMwMzQzYTM0NjU2NjYzM2E2MTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgETvygMA0GCSqGSIb3DQEBCwUA
A4IBAQBoXlyGYnVjDvdut0O9n6jjbu7yCBLQhDRJI/KnyTKLTkEIhNqYw0UXi5Rf
TwRS2ne9qLD3Jq8K8X63MGjkd6K1RtI/Cyiix5GDZAkei5dQ8wneLuEhTsJIeOwS
YDV9jamFQ4xbP2LYZUuSjfe12m4lrU/DaqfVnLlaGrmX7RKne3PtFfYq6guAb5VQ
Pj2gfpwxRjCl8VeC1jY9ZHvpbRz+yTyzbFxzG/bAAjMtC4xEVw6y0dGZxoxDm6RX
SpG5TNAgArc+bUeAZCRwLKIROLrRe7phDxv2VUANEbXUe70WBNprbPm+XT3gbBFE
5W/7MjQxEfQZgAsIv7onnwFFnmPY
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:09:48 2025 by rpki-client